AWS Cloud Security Engineer — Threat Detection & IAM

Stafide; Madrid; On-site; EUR 45,000 - 65,000; Full time

Job summary

Stafide is seeking a skilled Cloud Security Engineer to design, implement, and maintain AWS-based security solutions across production environments in Madrid. You will manage IAM, GuardDuty, Security Hub, and KMS, enforcing least-privilege access and robust encryption.

The role collaborates with cloud, DevOps, and infrastructure teams to detect threats, conduct security assessments, and support audits, while keeping security policies and monitoring up to date.

Qualifications

• Hands-on experience with AWS security services required.
• Knowledge of IAM, VPC security, security groups, and network access controls.
• Experience with cloud security monitoring, threat detection, and incident response.
• Understanding of encryption, key management, and data protection.
• Familiarity with security best practices and compliance standards.

Responsibilities

• Design, implement, and maintain security solutions across AWS environments.
• Manage AWS security services such as IAM, GuardDuty, Security Hub, and KMS.
• Enforce access controls, identity management, and least-privilege access.
• Monitor for threats, vulnerabilities, and suspicious activity.
• Configure security policies, encryption, logging, and monitoring.
• Perform security assessments and support audits to ensure compliance.
• Collaborate with cloud, DevOps, and infrastructure teams to strengthen security.

Skills

AWS cloud security

IAM and VPC security

Threat detection & incident response

Encryption & key management

Security best practices & compliance

Job description

Stafide is seeking a skilled Cloud Security Engineer to design, implement, and maintain AWS-based security solutions across production environments in Madrid. You will manage IAM, GuardDuty, Security Hub, and KMS, enforcing least-privilege access and robust encryption.

The role collaborates with cloud, DevOps, and infrastructure teams to detect threats, conduct security assessments, and support audits, while keeping security policies and monitoring up to date.